Appl. No. 09/784,967 

Reply to Office action of August 10, 2004 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

L (currently amended) A method of assuring that a message sent to a recipient 
was requested for opening by the recipient, the method comprising: 

encrypting a message using a session key to produce an encrypted 
message; 

encrypting the session key using a public key to produce an encrypted 
session key; 

generating a transaction identifier; 

encrypting the transaction identifier to provide an encrypted transaction 
identifier; 

sending, by the sender, the encrypted session key and the transaction 
identifier to an arbiter; 

sending, by the sender, the encrypted message and the encrypted 
transaction identifier to the recipient; 

generating a request for the encrypted session key based on the a 
decrypted transaction identifier; 

signing the decrypted transaction identifier; 
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sending transmitting the request to the arbite r; and . wherein said 
transmitting the request comprises sending the signed decrypted transaction 
identifier to the arbiter; and 

generating, by the arbiter, evidence that the request for the encrypted 
session key was received. 

2. (original) The method of claim 1 wherein the request comprises the 
transaction identifier and said generating evidence comprises logging that the 
transaction identifier was received. 

3. (original) The method of claim 1 wherein the request comprises the 
transaction identifier in unencrypted form such that the arbiter does not perform 
any cryptographic operations to extract the transaction identifier from the request. 

4. (original) The method of claim 1 wherein the arbiter does not receive the 
encrypted message delivered from the sender to the recipient. 

5. (original) The method of claim 1 further comprising notifying, by the arbiter, 
the sender of the request. 

6. (original) The method of claim 5 wherein said notifying comprises sending an 
e-mail to the sender. 
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7. (cancelled) 

8. (cancelled) 

9. (cancelled) 

10. (currently amended) A system to assure that a message was requested for 
opening, comprising: 

a sender to send encrypted decoding information and an encrypted 
message; 

an arbiter to store the encrypted decoding information; and 
a recipient to receive the encrypted message, request the encrypted 
decoding information, decrypt the encrypted decoding information and decrypt 
the encrypted message using the decrypted decoding information; 

wherein the arbiter, in response to receiving the request, generates 
evidence that the request was received[[.]] , and wherein the sender also sends a 
transaction identifier to the arbiter, the sender also sending an encrypted 
transaction identifier to the recipient, the transaction identifier being associated 
with the encrypted decoding information, the arbiter storing the associated 
transaction identifier and the encrypted decoding information, wherein the 
recipient decrypts the transaction identifier, signs the decrypted transaction 
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identifier, and requests the decoding information using the transaction identifier, 
wherein said requesting the decoding information comprises sending the signed 
decrypted transaction identifier to the arbiter, and the arbiter returns the 
encrypted decoding information associated with that transaction identifier to the 
recipient. 

11. (cancelled) 

12. (currently amended) A method of operating a recipient's messaging system to 
assure that a message sent to a recipient was requested for opening by the 
recipient, the method comprising: 

receiving an encrypted message that was encrypted using a session key; 
receiving an encrypted transaction identifier associated with the encrypted 
message; 

decrypting the transaction identifier; 

generating a request for the encrypted session key based on the decrypted 
transaction identifier; 

signing the decrypted transaction identifier; 

s e nding transmitting the request to an arbiter[[;]] m wherein said 
transmitting the request comprises sending the signed decrypted transaction 
identifier to the arbiter; 

receiving the encrypted session key; 
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decrypting the encrypted session key to provide a decrypted session key; 

and 

decrypting the encrypted message using the decrypted session key. 

13. (currently amended) A method of operating a sender's messaging system to 
assure that a message sent to a recipient was requested for opening by the 
recipient, the method comprising: 

encrypting a message using a session key to provide an encrypted 
message; 

encrypting the session key to provide an encrypted session key; 
generating a transaction identifier; 

encrypting the transaction identifier to provide an encrypted transaction 
identifier; 

sending the encrypted transaction identifier and the encrypted session key 
to an arbiter server; 

sending the encrypted message and the encrypted session key to a 
recipient; and 

receiving a notification, from the arbiter, in response to a request from the 
recipient for the encrypted session key based on the decrypted transaction 
identifier[[.]] , wherein the recipient signs the decrypted transaction identifier 
and transmits the request comprising sending the signed decrypted transaction 
identifier to the arbiter. 
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14. (currently amended) A method of operating a messaging system on an arbiter 
server to assure that a message sent to a recipient was requested for opening by 
the recipient, the method comprising: 

receiving a transaction identifier and an associated encrypted session key; 

receiving a request, from recipient, to send the encrypted session key to 
that recipient, the request comprising the transaction identifier[[;]] , wherein the 
recipient has decrypted the transaction identifier and signed the decrypted 
transaction identifier, and wherein the recipient transmitting the request 
comprises sending the signed decrypted transaction identifier to the arbiter; 

returning, in response to the request, the encrypted session key associated 
with the transaction identifier in the request; and 

generating evidence that the request to send the encrypted session key was 
received. 

15. (currently amended) A recipient's messaging system comprising: 

a memory operable to store instructions and data; 

a processor operable to execute the instructions stored in the memory[[;]] 
to perform the steps of: 

th e m e mory to stor e : 

storing an encrypted message that was received from a sender; 
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one or more instructions to d e crypt decrypting an encrypted transaction 
identifier to provide a decrypted transaction identifier; 
signing the d e crypted transaction id e ntifi e r; 

one or more instructions to generate generating a request for an encrypted 
session key based on the transaction identifier; 

on e or mor e instructions to s e nd transmitting the request to an arbiter[[;]] A 
wherein said transmitting the request comprises sending the signed decrypted 
transaction identifier to the arbiter; 

on e or mor e instructions to r e c e iv e receiving the encrypted session key; 

one or mor e instructions to d e crypt decrypting the encrypted session key 
to provide a decrypted session key; and 

on e or mor e instructions to d e crypt decrypting the encrypted message 
using the decrypted session key. 

16. (currently amended) A sender's messaging system comprising: 
a memory operable to store instructions and data; 

a processor operable to execute the instructions stored in the memory[[;]] 
to perform the steps of: 

th e m e mory to stor e : 

on e or mor e instructions to e ncrypt encrypting a message using a session 
key to provide an encrypted message; 
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one or mor e instructions to e ncrypt encrypting the session key to provide 
an encrypted session key; 

one or mor e instructions to g e n e rate generating a transaction identifier; 

one or mor e instructions to e ncrypt encrypting the transaction identifier to 
provide an encrypted transaction identifier; 

on e or mor e instructions to s e nd transmitting the transaction identifier and 
the encrypted session key to an arbiter server; 

on e or mor e instructions to s e nd transmitting the encrypted message, the 
encrypted transaction identifier and the encrypted session key to a recipient; and 

on e or mor e instructions to r e c e iv e receiving a notification, from the 
arbiter, in response to a request from the recipient for the encrypted session key 
based on the transaction identifier[[.]] , wherein the recipient has decrypted the 
encrypted transaction identifier, signed the decrypted transaction identifier, and 
transmitted the request comprising the signed decrypted transaction identifier to 
the arbiter. 

17. (currently amended) An arbiter comprising: 

a memory operable to store instructions and data; 

a processor operable to execute the instructions stored in the memory to 
perform the steps of: 

on e or mor e instructions to r e ceiv e receiving a transaction identifier and 
an encrypted session key; and 
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on e or mor e instructions to r e ceive receiving a request, from at least one 
recipient, to send the encrypted session key to that recipient, the request 
comprising the transaction identifier associated with that recipient[[.]] , wherein 
the recipient has decrypted the transaction identifier, signed the decrypted 
transaction identifier, and transmitted the request comprises sending the signed 
decrypted transaction identifier to the arbiter. 

18. (original) The arbiter of claim 17 further comprising: 

one or more instructions to return, in response to the request, the 
encrypted session key associated with the transaction identifier in the request. 

19. (original) The arbiter of claim 17 further comprising: 

one or more instructions to generate evidence that the request to send the 
encrypted session key was received by matching stored transaction identifiers 
with the transaction identifier from the request and logging that the request was 
received. 

20. (currently amended) An article of manufacture comprising a computer usable 
medium having computer readable program code embodied therein for assuring 
that a message sent to a recipient was received by the recipient, comprising 
instructions to: 

encrypt a message using a session key to produce an encrypted message; 
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encrypt the session key using a public key to produce an encrypted session 

key; 

generate a transaction identifier; 

encrypt the transaction identifier to provide an encrypted transaction 
identifier; 

send the encrypted session key and the transaction identifier to an arbiter; 
send the encrypted message and the encrypted transaction identifier to a 
recipient; 

generate a request for the encrypted session key based on the a decrypted 
transaction identifier; 

sign the decrypted transaction identifier; 

send transmit the request to the arbiterrand , wherein said transmitting the 
request comprises sending the signed decrypted transaction identifier to the 
arbiter; and 

generate, by the arbiter, evidence that a request for the encrypted session 
key was received. 

21. (original) The article of manufacture of claim 20 further comprising 
instructions to notify the sender that the request was received. 



22. (currently amended) An article of manufacture comprising a computer usable 
medium having computer readable program code embodied therein for operating 
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a recipient computer system to assure a sender that a message sent to the 
recipient was received by the recipient, comprising instructions to: 

decrypt an encrypted transaction identifier to provide a decrypted 
transaction identifier; 

generate a request for an encrypted session key based on the a decrypted 
transaction identifier; 

sign the decrypted transaction identifier; 

send transmit the request to an arbiter[[;]] , wherein said transmitting the 
request comprises sending the signed decrypted transaction identifier to the 
arbiter; 

receive the encrypted session key; 

decrypt the encrypted session key to provide a decrypted session key; and 
decrypt the encrypted message using the decrypted session key. 

23. (currently amended) An article of manufacture comprising a computer usable 
medium having computer readable program code embodied therein for operating 
a sender's computer system to assure the sender that a message sent to a recipient 
was received by the recipient, comprising instructions to: 

encrypt a message using a session key to provide an encrypted message; 

encrypt the session key to provide an encrypted session key; 

generate a transaction identifier; 
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encrypt the transaction identifier to provide an encrypted transaction 

c 

identifier; 

send the encrypted transaction identifier and the encrypted session key to 
an arbiter server; 

send the encrypted message and the encrypted session key to a recipient; 

and 

receive a notification, from the arbiter, in response to a request from the 
recipient for the encrypted session key based on the decrypted transaction 
identifier[[.]] , wherein the recipient signs the decrypted transaction identifier 
and transmits the request comprising sending the signed decrypted transaction 
identifier to the arbiter. 

24. (currently amended) An article of manufacture comprising a computer usable 
medium having computer readable program code embodied therein for operating 
an arbiter computer system to assure the sender that a message sent to a recipient 
was received by the recipient, comprising instructions to: 

receive a transaction identifier and an encrypted session key; and 
receive a request, from at least one recipient, to send the encrypted session 
key to that recipient, the request comprising the transaction identifier associated 
with that recipient[[;]] , wherein the recipient has decrypted the transaction 
identifier and signed the decrypted transaction identifier, and wherein the 
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recipient transmitting the request comprises sending the signed decrypted 
transaction identifier to the arbiter. 

25. (original) The article of manufacture of claim 24 further comprising one or 
more instructions to return, in response to the request, the encrypted session key 
associated with the transaction identifier in the request to the recipient. 

26. (original) The article of manufacture of claim 24 further comprising one or 
more instructions to generate evidence that the request to send the encrypted 
session key was received. 

27. (new) A method of assuring that a message sent to a recipient was requested 
for opening by the recipient, the method comprising: 

encrypting a message using a session key to produce an encrypted 
message; 

encrypting the session key using a public key to produce an encrypted 
session key; 

generating a transaction identifier; 

encrypting the transaction identifier to provide an encrypted transaction 
identifier; 

sending, by the sender, the encrypted session key and the transaction 
identifier to an arbiter; 
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sending, by the sender, the encrypted message and the encrypted 
transaction identifier to the recipient; 

generating a request for the encrypted session key based on the transaction 
identifier; 

transmitting the request to the arbiter, wherein the request is repeatedly 
transmitted for a predetermined period of time by the recipient until the encrypted 
session key is received; and 

generating, by the arbiter, evidence that the request for the encrypted 
session key was received. 

28. (new) A method of assuring that a message sent to a recipient was requested 
for opening by the recipient, the method comprising: 

encrypting a message using a session key to produce an encrypted 
message; 

encrypting the session key using a public key to produce an encrypted 
session key; 

generating a transaction identifier; 

encrypting the transaction identifier to provide an encrypted transaction 
identifier; 

sending, by the sender, the encrypted session key and the transaction 
identifier to an arbiter; 



Page 15 of 39 



Appl. No. 09/784,967 

Reply to Office action of August 10, 2004 

sending, by the sender, the encrypted message and the encrypted 
transaction identifier to the recipient; 

generating a request for the encrypted session key based on the transaction 
identifier, wherein said generating the request comprises: 

decrypting, using the recipient's private key, the transaction 
identifier from the encrypted transaction identifier to provide a decrypted 
transaction identifier, 

signing the decrypted transaction identifier and a nonce associated 
with that recipient, and 

sending the signed decrypted transaction identifier and the nonce to 
the arbiter; 

sending the request to the arbiter; and 

generating, by the arbiter, evidence that the request for the encrypted 
session key was received. 

29. (new) A system to assure that a message was requested for opening, 
comprising: 

a sender to send encrypted decoding information and an encrypted 
message; 

an arbiter to store the encrypted decoding information; and 
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a recipient to receive the encrypted message, request the encrypted 
decoding information, decrypt the encrypted decoding information and decrypt 
the encrypted message using the decrypted decoding information; 

wherein the arbiter, in response to receiving the request, generates 
evidence that the request was received, and wherein the sender also sends a 
transaction identifier to the arbiter, the sender also sending an encrypted 
transaction identifier to the recipient, the transaction identifier being associated 
with the encrypted decoding information, the arbiter storing the associated 
transaction identifier and the encrypted decoding information, wherein the 
recipient decrypts the transaction identifier and requests the decoding 
information using the transaction identifier, and the arbiter returns the encrypted 
decoding information associated with that transaction identifier to the recipient, , 
wherein the decoding information is repeatedly requested for a predetermined 
period of time by the recipient until the encrypted decoding information is 
received. 

30. (new) A system to assure that a message was requested for opening, 
comprising: 

a sender to send encrypted decoding information and an encrypted 
message; 

an arbiter to store the encrypted decoding information; and 
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a recipient to receive the encrypted message, request the encrypted 
decoding information, decrypt the encrypted decoding information and decrypt 
the encrypted message using the decrypted decoding information; 

wherein the arbiter, in response to receiving the request, generates 
evidence that the request was received, and wherein the sender also sends a 
transaction identifier to the arbiter, the sender also sending an encrypted 
transaction identifier to the recipient, the transaction identifier being associated 
with the encrypted decoding information, the arbiter storing the associated 
transaction identifier and the encrypted decoding information, wherein the 
recipient decrypts the transaction identifier and requests the decoding 
information using the transaction identifier, and the arbiter returns the encrypted 
decoding information associated with that transaction identifier to the recipient, 
wherein the request is generated by: 

decrypting, using the recipient's private key, the transaction 

identifier from the encrypted transaction identifier to provide a decrypted 

transaction identifier; 

signing the decrypted transaction identifier and a nonce associated 

with that recipient; and 

sending the signed decrypted transaction identifier and the nonce to 

the arbiter. 
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31. (new) A method of operating a recipient's messaging system to assure that a 
message sent to a recipient was requested for opening by the recipient, the 
method comprising: 

receiving an encrypted message that was encrypted using a session key; 
receiving an encrypted transaction identifier associated with the encrypted 
message; 

decrypting the transaction identifier; 

generating a request for the encrypted session key based on the transaction 
identifier; 

transmitting the request to an arbiter, wherein the request is repeatedly 
transmitted for a predetermined period of time by the recipient until the encrypted 
session key is received; 

receiving the encrypted session key; 

decrypting the encrypted session key to provide a decrypted session key; 

and 

decrypting the encrypted message using the decrypted session key. 

32. (new) A method of operating a recipient's messaging system to assure that a 
message sent to a recipient was requested for opening by the recipient, the 
method comprising: 

receiving an encrypted message that was encrypted using a session key; 



Page 19 of 39 



AppL No. 09/784,967 

Reply to Office action of August 10, 2004 

receiving an encrypted transaction identifier associated with the encrypted 
message; 

decrypting the transaction identifier; 

generating a request for the encrypted session key based on the transaction 
identifier, wherein said generating the request comprises: 

decrypting, using the recipient's private key, the transaction 
identifier from the encrypted transaction identifier to provide a decrypted 
transaction identifier, 

signing the decrypted transaction identifier and a nonce associated 
with that recipient, and 

sending the signed decrypted transaction identifier and the nonce to 
the arbiter; 

sending the request to an arbiter; 
receiving the encrypted session key; 

decrypting the encrypted session key to provide a decrypted session key; 

and 

decrypting the encrypted message using the decrypted session key. 

33. (new) A method of operating a sender's messaging system to assure that a 
message sent to a recipient was requested for opening by the recipient, the 
method comprising: 
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encrypting a message using a session key to provide an encrypted 
message; 

encrypting the session key to provide an encrypted session key; 
generating a transaction identifier; 

encrypting the transaction identifier to provide an encrypted transaction 
identifier; 

sending the encrypted transaction identifier and the encrypted session key 
to an arbiter server; 

sending the encrypted message and the encrypted session key to a 
recipient; and 

receiving a notification, from the arbiter, in response to a request from the 
recipient for the encrypted session key based on the transaction identifier, 
wherein the request is repeatedly transmitted for a predetermined period of time 
by the recipient until the encrypted session key is received. 

34. (new) A method of operating a sender's messaging system to assure that a 
message sent to a recipient was requested for opening by the recipient, the 
method comprising: 

encrypting a message using a session key to provide an encrypted 
message; 

encrypting the session key to provide an encrypted session key; 
generating a transaction identifier; 
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encrypting the transaction identifier to provide an encrypted transaction 
identifier; 

sending the encrypted transaction identifier and the encrypted session key 
to an arbiter server; 

sending the encrypted message and the encrypted session key to a 
recipient; and 

receiving a notification, from the arbiter, in response to a request from the 
recipient for the encrypted session key based on the transaction identifier, 
wherein the recipient generates the request by: 

decrypting, using the recipient's private key, the transaction 
identifier from the encrypted transaction identifier to provide a decrypted 
transaction identifier; 

signing the decrypted transaction identifier and a nonce associated 
with that recipient; and 

sending the signed decrypted transaction identifier and the nonce to 
the arbiter. 

35. (new) A method of operating a messaging system on an arbiter server to 
assure that a message sent to a recipient was requested for opening by the 
recipient, the method comprising: 

receiving a transaction identifier and an associated encrypted session key; 
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receiving a request, from a recipient, to send the encrypted session key to 
that recipient, the request comprising the transaction identifier, wherein the 
request is repeatedly transmitted for a predetermined period of time by the 
recipient until the encrypted session key is received; 

returning, in response to the request, the encrypted session key associated 
with the transaction identifier in the request; and 

generating evidence that the request to send the encrypted session key was 
received. 

36. (new) A method of operating a messaging system on an arbiter server to 
assure that a message sent to a recipient was requested for opening by the 
recipient, the method comprising: 

receiving a transaction identifier and an associated encrypted session key; 

receiving a request, from a recipient, to send the encrypted session key to 
that recipient, the request comprising the transaction identifier, wherein the 
recipient generates the request by: 

decrypting, using the recipient's private key, the transaction 

identifier from the encrypted transaction identifier to provide a decrypted 

transaction identifier, 

signing the decrypted transaction identifier and a nonce associated 

with that recipient, and 
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sending the signed decrypted transaction identifier and the nonce to 
the arbiter; 

returning, in response to the request, the encrypted session key associated 
with the transaction identifier in the request; and 

generating evidence that the request to send the encrypted session key was 
received. 

37. (new) A recipient's messaging system comprising: 
a memory operable to store instructions and data; 

a processor operable to execute the instructions stored in the memory to 
perform the steps of: 

storing an encrypted message that was received from a sender; 

decrypting an encrypted transaction identifier to provide a decrypted 
transaction identifier; 

generating a request for an encrypted session key based on the transaction 
identifier; 

transmitting the request to an arbiter, wherein the request is repeatedly 
transmitted for a predetermined period of time by the recipient until the encrypted 
session key is received; 

receiving the encrypted session key; 

decrypting the encrypted session key to provide a decrypted session key; 

and 
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decrypting the encrypted message using the decrypted session key. 

38. (new) A recipient's messaging system comprising: 
a memory operable to store instructions and data; 

a processor operable to execute the instructions stored in the memory to 
perform the steps of: 

storing an encrypted message that was received from a sender; 
decrypting an encrypted transaction identifier to provide a decrypted 
transaction identifier; 

generating a request for an encrypted session key based on the transaction 
identifier, wherein said generating the request comprises: 

decrypting, using the recipient's private key, the transaction 
identifier from the encrypted transaction identifier to provide a decrypted 
transaction identifier, 

signing the decrypted transaction identifier and a nonce associated 
with that recipient, and 

sending the signed decrypted transaction identifier and the nonce to 
the arbiter; 

transmitting the request to an arbiter; 
receiving the encrypted session key; 

decrypting the encrypted session key to provide a decrypted session key; 

and 
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decrypting the encrypted message using the decrypted session key. 

39. (new) A sender's messaging system comprising: 

a memory operable to store instructions and data; 

a processor operable to execute the instructions stored in the memory to 
perform the steps of: 

encrypting a message using a session key to provide an encrypted 
message; 

encrypting the session key to provide an encrypted session key; 
generating a transaction identifier; 

encrypting the transaction identifier to provide an encrypted transaction 
identifier; 

transmitting the transaction identifier and the encrypted session key to an 
arbiter server; 

transmitting the encrypted message, the encrypted transaction identifier 
and the encrypted session key to a recipient; and 

receiving a notification, from the arbiter, in response to a request from the 
recipient for the encrypted session key based on the transaction identifier 
wherein the recipient repeatedly transmits the request for a predetermined period 
of time until the encrypted session key is received. 

40. (new) A sender's messaging system comprising: 
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a memory operable to store instructions and data; 

a processor operable to execute the instructions stored in the memory to 
perform the steps of: 

encrypting a message using a session key to provide an encrypted 
message; 

encrypting the session key to provide an encrypted session key; 
generating a transaction identifier; 

encrypting the transaction identifier to provide an encrypted transaction 
identifier; 

transmitting the transaction identifier and the encrypted session key to an 
arbiter server; 

transmitting the encrypted message, the encrypted transaction identifier 
and the encrypted session key to a recipient; and 

receiving a notification, from the arbiter, in response to a request from the 
recipient for the encrypted session key based on the transaction identifier 
wherein the recipient generates the request by: 

decrypting, using the recipient's private key, the transaction 

identifier from the encrypted transaction identifier to provide a decrypted 

transaction identifier; 

signing the decrypted transaction identifier and a nonce associated 

with that recipient; and 
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sending the signed decrypted transaction identifier and the nonce to 
the arbiter. 

41. (new) An arbiter comprising: 

a memory operable to store instructions and data; 

a processor operable to execute the instructions stored in the memory to 
perform the steps of: 

receiving a transaction identifier and an encrypted session key; and 
receiving a request, from at least one recipient, to send the encrypted 
session key to that recipient, the request comprising the transaction identifier 
associated with that recipient, wherein the recipient repeatedly transmits the 
request for a predetermined period of time until the encrypted session key is 
received. 

42. (new) An arbiter comprising: 

a memory operable to store instructions and data; 

a processor operable to execute the instructions stored in the memory to 
perform the steps of: 

receiving a transaction identifier and an encrypted session key; and 
receiving a request, from at least one recipient, to send the encrypted 
session key to that recipient, the request comprising the transaction identifier 
associated with that recipient, wherein the request generates the request by: 
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decrypting, using the recipient's private key, the transaction 
identifier from the encrypted transaction identifier to provide a decrypted 
transaction identifier; 

signing the decrypted transaction identifier and a nonce associated 
with that recipient; and 

sending the signed decrypted transaction identifier and the nonce to 
the arbiter. 

43. (new) An article of manufacture comprising a computer usable medium 
having computer readable program code embodied therein for assuring that a 
message sent to a recipient was received by the recipient, comprising instructions 
to: 

encrypt a message using a session key to produce an encrypted message; 
encrypt the session key using a public key to produce an encrypted session 

key; 

generate a transaction identifier; 

encrypt the transaction identifier to provide an encrypted transaction 
identifier; 

send the encrypted session key and the transaction identifier to an arbiter; 
send the encrypted message and the encrypted transaction identifier to a 
recipient; 
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generate a request for the encrypted session key based on the transaction 
identifier; 

transmit the request to the arbiter, wherein the request is repeatedly 
transmitted for a predetermined period of time by the recipient until the encrypted 
session key is received; and 

generate, by the arbiter, evidence that a request for the encrypted session 
key was received. 

44. (new) An article of manufacture comprising a computer usable medium 
having computer readable program code embodied therein for assuring that a 
message sent to a recipient was received by the recipient, comprising instructions 
to: 

encrypt a message using a session key to produce an encrypted message; 
encrypt the session key using a public key to produce an encrypted session 

key; 

generate a transaction identifier; 

encrypt the transaction identifier to provide an encrypted transaction 
identifier; 

send the encrypted session key and the transaction identifier to an arbiter; 
send the encrypted message and the encrypted transaction identifier to a 
recipient; 
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generate a request for the encrypted session key based on the transaction 
identifier, wherein said generating the request comprises: 

decrypting, using the recipient's private key, the transaction 
identifier from the encrypted transaction identifier to provide a decrypted 
transaction identifier, 

signing the decrypted transaction identifier and a nonce associated 
with that recipient, and 

sending the signed decrypted transaction identifier and the nonce to 
the arbiter; 

send the request to the arbiter; and 

generate, by the arbiter, evidence that a request for the encrypted session 
key was received. 

45. (new) An article of manufacture comprising a computer usable medium 
having computer readable program code embodied therein for operating a 
recipient computer system to assure a sender that a message sent to the recipient 
was received by the recipient, comprising instructions to: 

decrypt an encrypted transaction identifier to provide a decrypted 
transaction identifier; 

generate a request for an encrypted session key based on the transaction 
identifier; 
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transmit the request to an arbiter, wherein the request is repeatedly 
transmitted for a predetermined period of time by the recipient until the encrypted 
session key is received; 

receive the encrypted session key; 

decrypt the encrypted session key to provide a decrypted session key; and 
decrypt the encrypted message using the decrypted session key. 

46. (new) An article of manufacture comprising a computer usable medium 
having computer readable program code embodied therein for operating a 
recipient computer system to assure a sender that a message sent to the recipient 
was received by the recipient, comprising instructions to: 

decrypt an encrypted transaction identifier to provide a decrypted 
transaction identifier; 

generate a request for an encrypted session key based on the transaction 
identifier, wherein said generating the request comprises: 

decrypting, using the recipient's private key, the transaction 

identifier from the encrypted transaction identifier to provide a decrypted 

transaction identifier, 

signing the decrypted transaction identifier and a nonce associated 

with that recipient, and 

sending the signed decrypted transaction identifier and the nonce to 

the arbiter; 
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transmit the request to an arbiter; 
receive the encrypted session key; 

decrypt the encrypted session key to provide a decrypted session key; and 
decrypt the encrypted message using the decrypted session key. 

47. (new) An article of manufacture comprising a computer usable medium 
having computer readable program code embodied therein for operating a 
sender's computer system to assure the sender that a message sent to a recipient 
was received by the recipient, comprising instructions to: 

encrypt a message using a session key to provide an encrypted message; 

encrypt the session key to provide an encrypted session key; 

generate a transaction identifier; 

encrypt the transaction identifier to provide an encrypted transaction 
identifier; 

send the encrypted transaction identifier and the encrypted session key to 
an arbiter server; 

send the encrypted message and the encrypted session key to a recipient; 

and 

receive a notification, from the arbiter, in response to a request from the 
recipient for the encrypted session key based on the transaction identifier, 
wherein the request is repeatedly transmitted for a predetermined period of time 
by the recipient until the encrypted session key is received. 
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48. (new) An article of manufacture comprising a computer usable medium 
having computer readable program code embodied therein for operating a 
sender's computer system to assure the sender that a message sent to a recipient 
was received by the recipient, comprising instructions to: 

encrypt a message using a session key to provide an encrypted message; 

encrypt the session key to provide an encrypted session key; 

generate a transaction identifier; 

encrypt the transaction identifier to provide an encrypted transaction 
identifier; 

send the encrypted transaction identifier and the encrypted session key to 
an arbiter server; 

send the encrypted message and the encrypted session key to a recipient; 

and 

receive a notification, from the arbiter, in response to a request from the 
recipient for the encrypted session key based on the transaction identifier, 
wherein the recipient generates the request by: 

decrypting, using the recipient's private key, the transaction 
identifier from the encrypted transaction identifier to provide a decrypted 
transaction identifier; 

signing the decrypted transaction identifier and a nonce associated 
with that recipient; and 
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sending the signed decrypted transaction identifier and the nonce to 
the arbiter. 

49. (new) An article of manufacture comprising a computer usable medium 
having computer readable program code embodied therein for operating an 
arbiter computer system to assure the sender that a message sent to a recipient 
was received by the recipient, comprising instructions to: 

receive a transaction identifier and an encrypted session key; and 
receive a request, from a recipient, to send the encrypted session key to 
that recipient, the request comprising the transaction identifier, wherein the 
request is repeatedly transmitted for a predetermined period of time by the 
recipient until the encrypted session key is received. 

c 

50. (new) An article of manufacture comprising a computer usable medium 
having computer readable program code embodied therein for operating an 
arbiter computer system to assure the sender that a message sent to a recipient 
was received by the recipient, comprising instructions to: 

receive a transaction identifier and an encrypted session key; and 

receive a request, from a recipient, to send the encrypted session key to 

that recipient, the request comprising the transaction identifier, wherein the 

recipient generates the request by: 
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decrypting, using the recipient's private key, the transaction 
identifier from the encrypted transaction identifier to provide a decrypted 
transaction identifier, 

signing the decrypted transaction identifier and a nonce associated 
with that recipient, and 

sending the signed decrypted transaction identifier and the nonce to 
the arbiter; 

returning, in response to the request, the encrypted session key associated 
with the transaction identifier in the request. 
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